I85PREP
⌘ K
MS POST study materials
MS POST study resources

MS POST practice questions

One question at a time. Build your MS POST understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Manage organizational settings and resources

A Microsoft 365 administrator needs a role that lets a user manage billing and create support requests for the tenant but does not grant the ability to reset other users' passwords. Which role should be assigned?

  1. Global Administrator
  2. Billing Administrator Correct answer.
  3. Helpdesk Administrator
  4. User Administrator

Explanation

The Billing Administrator role is scoped to subscription, purchase, and billing-related tasks plus service health and support request creation. It does not include directory object management such as resetting other users' passwords. Global Administrator and User Administrator both can manage user credentials, so they exceed the requirement.

Question 2Manage organizational settings and resources

An organization wants every new user account to automatically receive a specific set of group memberships and a license. Which Microsoft 365 capability should be configured?

  1. Conditional Access policies
  2. Group-based licensing with attribute mapping Correct answer.
  3. Dynamic group membership rules
  4. Self-service password reset

Explanation

Group-based licensing assigns licenses to users based on their group membership, and combining it with automatic group membership gives new users licenses without manual steps. Dynamic membership rules can populate the group automatically, but the licensing outcome depends on group-based licensing being configured.

Question 3Manage organizational settings and resources

A tenant has more licenses purchased than are currently assigned, yet a specific user cannot be assigned a license for a service plan that other users already use. Which cause is most likely?

  1. The user has not completed multi-factor registration
  2. The user's account is in a blocked sign-in state
  3. The service plan is disabled at the tenant level for that product Correct answer.
  4. The tenant has exceeded its storage quota

Explanation

When a service plan is turned off for a licensing product at the tenant level, users assigned that product do not receive the disabled service. Available seat count is irrelevant if the plan itself is disabled. Re-enabling the service plan in the product's licensing settings resolves the issue.

Question 4Manage organizational settings and resources

An administrator must ensure that when a user is removed from the sales department in the HR system, their access to Microsoft 365 resources is revoked automatically. Which approach best meets this requirement?

  1. Configure dynamic groups based on the department attribute Correct answer.
  2. Assign licenses directly to each user
  3. Manually review group membership each quarter
  4. Enable security defaults

Explanation

Dynamic groups recalculate membership from user attributes, so removing a user from the department attribute removes them from the group and any access granted through it. Direct license assignment and periodic manual reviews do not provide automatic revocation tied to the HR change.

Question 5Manage organizational settings and resources

Which Microsoft 365 admin center setting controls whether users can create new Microsoft 365 groups from Outlook and other apps?

  1. Self-service purchase settings
  2. Guest access settings
  3. Group creation permissions Correct answer.
  4. Password expiration policy

Explanation

Group creation permissions determine which users or security groups are allowed to create Microsoft 365 groups across connected workloads. Restricting it to a security group limits creation to approved users. Guest access and password policies govern different concerns.

Question 6Manage organizational settings and resources

An administrator needs to delegate the ability to manage Exchange recipients to a helpdesk team without granting full tenant administration. Which approach is most appropriate?

  1. Share the global administrator credentials with the team
  2. Assign the Reports Reader role to each team member
  3. Add each helpdesk member to Global Administrator
  4. Assign the Exchange Administrator role to a role-assignable group containing the team Correct answer.

Explanation

The Exchange Administrator role grants management of Exchange Online configuration and recipients without full tenant control. Assigning it to a role-assignable group lets membership changes grant or revoke the permission consistently for the whole team.

Question 7Manage organizational settings and resources

An organization wants to prevent users from assigning Microsoft 365 licenses to themselves through self-service purchase. Which setting should be adjusted?

  1. Directory synchronization settings
  2. Password reset policy
  3. Self-service purchase settings in the Microsoft 365 admin center Correct answer.
  4. License assignment in the Azure portal

Explanation

Self-service purchase settings determine whether users can buy and manage licenses for themselves through self-service channels. Disabling the relevant products blocks those purchases while leaving administrator-driven assignment intact.

Question 8Manage organizational settings and resources

A company must ensure that when a shared mailbox is created, the associated Microsoft 365 group and its resources are governed by a naming policy. Which configuration enforces this?

  1. Retention labels
  2. Exchange transport rules
  3. Azure AD naming policy for groups Correct answer.
  4. Conditional Access named locations

Explanation

The Azure AD (Entra ID) group naming policy enforces prefixes, suffixes, and blocked words on group names at creation time. It applies to groups created across workloads, including those tied to shared resources. Transport rules and retention labels address mail flow and data retention instead.

Question 9Manage organizational settings and resources

An administrator wants to restrict which users can register applications in the tenant. Which directory setting controls this?

  1. User settings for app registrations Correct answer.
  2. License service plan settings
  3. Enterprise application consent settings
  4. Conditional Access session controls

Explanation

The user settings blade controls whether all users or only selected users may register applications and consent to apps on their behalf. Restricting it to selected users limits who can create app registrations. Consent settings are related but govern permissions granted to apps rather than who may register them.

Question 10Manage organizational settings and resources

An organization requires that all administrative actions in Microsoft 365 be attributable to an individual named account. Which practice supports this requirement?

  1. Share a single admin account among the IT team
  2. Enable self-service password reset for admins
  3. Use a shared mailbox for admin notifications
  4. Assign admin roles to individual accounts and use separate user accounts for daily work Correct answer.

Explanation

Assigning roles to individual accounts ensures audit logs identify the person performing each action. Microsoft recommends separate accounts for administrative and everyday productivity work so that admin credentials are used only for privileged tasks. Shared accounts break attribution.

Question 11Manage organizational settings and resources

A tenant administrator needs to review which users have been assigned the Global Administrator role over the past month. Which resource provides this information?

  1. The audit log in the Microsoft Purview compliance portal Correct answer.
  2. The license usage report
  3. The service health dashboard
  4. The message center

Explanation

Role assignment changes and privileged actions are recorded in the unified audit log, which can be searched in the compliance portal. Filtering on role management activities reveals who was granted or removed privileged roles. Service health and message center describe service incidents and announcements.

Question 12Manage organizational settings and resources

An administrator must ensure that users in a subsidiary cannot see other users in the directory when using the address list. Which feature should be configured?

  1. Address book policy Correct answer.
  2. Transport rule
  3. Sharing policy
  4. Retention policy

Explanation

Address book policies scope which address lists, global address list, and offline address book a mailbox sees, effectively hiding other recipients. They are commonly used for multi-tenant-like separation inside one Exchange organization. Transport and retention policies govern message handling and data lifecycle.

Question 13Manage organizational settings and resources

Which Microsoft 365 admin center capability allows an administrator to create a standardized set of configuration tasks that can be applied to multiple users at once during onboarding?

  1. Message center preferences
  2. Manual per-user configuration
  3. Service health advisories
  4. Bulk user import with a CSV template Correct answer.

Explanation

Bulk import via CSV lets an administrator create many user accounts at once with consistent attributes such as department and license location. This standardizes onboarding and reduces per-user manual configuration. Message center and service health provide information rather than provisioning.

Question 14Manage organizational settings and resources

An administrator deletes a user account by mistake and needs to restore it. Within what default window can the account be restored in Microsoft Entra ID without additional configuration?

  1. 90 days
  2. 7 days
  3. 30 days Correct answer.
  4. 14 days

Explanation

Deleted users are retained in a soft-deleted state for 30 days by default, during which an administrator can restore the account and its attributes. After that period the account is permanently removed unless the retention window was extended.

Question 15Manage organizational settings and resources

A company wants to allow external partners to collaborate on documents without giving them a full internal user account. Which configuration best supports this?

  1. Assigning Global Administrator to partners
  2. Enabling security defaults
  3. Creating internal accounts for each partner
  4. Guest user invitations with external collaboration settings Correct answer.

Explanation

Guest users in Microsoft Entra ID can be granted access to specific resources such as Teams or SharePoint without an internal mailbox or full account. External collaboration settings control whether invitations are allowed and who may invite guests.

Question 16Manage organizational settings and resources

An administrator needs to ensure that when a user's manager changes in the HR system, the change is reflected in Microsoft 365 without manual updates. Which configuration supports this?

  1. Attribute mapping in directory synchronization Correct answer.
  2. Manual updates in the admin center
  3. Retention label
  4. Conditional Access policy

Explanation

Directory synchronization with attribute mapping flows values such as manager from the on-premises or HR source into Microsoft Entra ID. Once mapped, changes propagate automatically during synchronization cycles. Manual updates and access policies do not automate attribute flow.

Question 17Manage organizational settings and resources

Which role should be assigned to a user who needs to view service health information and create support requests but should not modify tenant configuration?

  1. Global Administrator
  2. Service Support Administrator Correct answer.
  3. Security Administrator
  4. SharePoint Administrator

Explanation

The Service Support Administrator role allows viewing service health and creating support tickets without broader configuration rights. It is intended for support personnel who triage incidents. Global and workload administrators carry configuration permissions beyond the requirement.

Question 18Manage organizational settings and resources

An administrator must configure Microsoft 365 so that a specific department's mailboxes retain deleted items for five years to satisfy a regulatory requirement. Which feature should be used?

  1. Retention policy with a five-year retention period Correct answer.
  2. Transport rule that blocks deletion
  3. Litigation hold on individual mailboxes
  4. Journaling to an external archive

Explanation

A retention policy applied to mailboxes can keep deleted items for a defined period such as five years, satisfying regulatory retention. Retention policies are the standard mechanism for lifecycle management across Microsoft 365 workloads. Transport rules and journaling serve different purposes.

Question 19Manage organizational settings and resources

An administrator needs to grant a team the ability to manage SharePoint site settings without granting tenant-wide SharePoint administration. Which approach is appropriate?

  1. Add team members as site collection administrators for the specific site Correct answer.
  2. Assign Global Administrator to the team
  3. Grant the team Exchange Administrator
  4. Assign SharePoint Administrator to the team

Explanation

Site collection administrators manage settings for a specific site collection, which matches the scoped requirement. The SharePoint Administrator role applies tenant-wide, and Global Administrator exceeds the need entirely. Exchange Administrator covers a different workload.

Question 20Manage organizational settings and resources

An organization wants to ensure that licenses assigned to a group are automatically removed from users when they leave the group. Which configuration achieves this?

  1. Disabling the service plan at the tenant level
  2. License assignment through PowerShell only
  3. Group-based licensing with the group as the licensing source Correct answer.
  4. Direct license assignment to each user

Explanation

When licenses are assigned through a group, membership changes drive license assignment and removal automatically. Removing a user from the group removes the license that came from that group source. Direct assignment persists until manually removed.

Question 21Manage organizational settings and resources

An administrator must verify which users have not signed in for 90 days to reclaim unused licenses. Which approach provides this information?

  1. Check the message center for inactive users
  2. Inspect the Exchange transport log
  3. Review the service health dashboard
  4. Review the sign-in activity report in Microsoft Entra ID Correct answer.

Explanation

The Microsoft Entra sign-in activity report includes last sign-in timestamps that can be filtered to identify dormant accounts. Those accounts can then be reviewed before licenses are reclaimed. Message center, service health, and transport logs do not report per-user sign-in recency.

Question 22Manage organizational settings and resources

A tenant administrator wants to prevent users from accidentally deleting a Microsoft 365 group that is used for a critical project. Which setting should be configured?

  1. Self-service password reset
  2. Conditional Access policy
  3. Group expiration policy
  4. Group deletion protection via owner approval Correct answer.

Explanation

Requiring owner approval before deletion protects critical groups from accidental removal by members. Group expiration policies instead remove inactive groups automatically, which is the opposite of the desired protection. Access policies do not govern group deletion.

Question 23Manage organizational settings and resources

Which Microsoft 365 capability allows an administrator to define which users must use multi-factor authentication when accessing administrative portals?

  1. Password expiration policy
  2. Self-service purchase settings
  3. Group naming policy
  4. Conditional Access policy targeting admin roles Correct answer.

Explanation

Conditional Access policies can target directory roles so that users holding administrative roles must satisfy MFA when signing in. This provides granular control beyond tenant-wide defaults. Password, purchase, and naming policies address unrelated concerns.

Question 24Manage organizational settings and resources

An administrator must report on license utilization across departments to plan a renewal. Which data source is most appropriate?

  1. The audit log filtered by sign-in events
  2. The service health dashboard
  3. The license usage report in the Microsoft 365 admin center Correct answer.
  4. The message center archive

Explanation

The license usage report summarizes purchased versus assigned licenses and can be grouped by department or product. This supports renewal planning by revealing unused capacity. Audit logs and service health report activity and incidents rather than license utilization.

Question 25Manage organizational settings and resources

An administrator needs to ensure that when a user is assigned a license, only the required service plans such as Exchange Online are enabled while others remain off. Which configuration achieves this?

  1. Conditional Access policy
  2. Tenant-wide service plan disabling
  3. License assignment with specific service plans enabled Correct answer.
  4. Direct assignment of all available plans

Explanation

When assigning a license, an administrator can select which service plans are enabled for that user, leaving unneeded plans off. This controls feature exposure per user without affecting the whole tenant. Tenant-wide disabling affects everyone and is less precise.

Question 26Manage organizational settings and resources

A Microsoft 365 administrator wants to give a newly hired service desk analyst the minimum role needed to reset user passwords and manage support tickets for non-administrator users. Which built-in role best meets this requirement?

  1. Password Administrator Correct answer.
  2. Service Support Administrator
  3. Global Administrator
  4. User Administrator

Explanation

Password Administrator is a least-privilege built-in role scoped to resetting passwords and managing password-related tasks for non-administrator users, which is the core of the request. Global Administrator grants full tenant control and violates least privilege, while roles such as User Administrator cover broader user lifecycle management than required.

Question 27Manage organizational settings and resources

An organization wants every new Microsoft 365 group created by users to be reviewed by an approver before it becomes active. Which control should the administrator configure in the Microsoft 365 admin center?

  1. A creation policy that requires approval for new groups Correct answer.
  2. A sensitivity label publishing policy for groups
  3. A group naming policy with a blocked-words list
  4. A guest access expiration policy for groups

Explanation

Group creation policies in the Microsoft 365 admin center can require that new groups created by non-administrators be approved before provisioning completes. Naming, guest expiration, and sensitivity label policies govern naming, membership lifetime, and classification rather than pre-creation approval.

Question 28Manage organizational settings and resources

An administrator needs to configure a Microsoft 365 group so that members can read conversations but only owners can post new conversations and modify group settings. Which setting should the administrator change?

  1. The group's membership type, changing it to assigned
  2. The group's member permissions setting for posting Correct answer.
  3. The group's conversation subscription setting
  4. The group's privacy setting, changing it to private

Explanation

Microsoft 365 groups expose a member permissions setting that determines whether members can post to the group or only read and receive copies of conversations. Restricting posting to owners is achieved by changing that permission rather than by altering privacy, membership type, or subscription.

Question 29Manage organizational settings and resources

A tenant has a delegated partner relationship, and the administrator must confirm which granular delegated permissions the partner holds over Exchange Online and SharePoint rather than assuming tenant-wide access. Which capability provides this granular delegated administration model?

  1. Azure AD Privileged Identity Management
  2. Conditional Access authentication strength
  3. Microsoft 365 Defender role assignments
  4. Granular delegated admin privileges (GDAP) Correct answer.

Explanation

Granular delegated admin privileges let a customer grant a partner specific roles scoped to workloads such as Exchange Online and SharePoint instead of broad delegated administrator rights. The other options govern just-in-time elevation, security workload roles, or authentication requirements rather than partner delegation scope.

Question 30Manage organizational settings and resources

An administrator must design a solution so that a contractor account can manage billing and create support requests while being unable to modify user credentials, mailboxes, or tenant-wide settings. The contractor also must not retain standing access between engagements. Which design best satisfies all constraints?

  1. Assign the Service Support Administrator role permanently and add the contractor to a role-assignable group.
  2. Assign the Billing Administrator role permanently and rely on audit logs to detect misuse.
  3. Assign the Helpdesk Administrator role as eligible through Privileged Identity Management with approval and a time-bound activation.
  4. Assign the Billing Administrator role as eligible through Privileged Identity Management with approval and a time-bound activation. Correct answer.

Explanation

Billing Administrator covers billing management and support request creation, and making it eligible in Privileged Identity Management with approval and time limits removes standing access. The combination satisfies both the permission scope and the no-standing-access constraint, whereas permanent assignments or broader roles fail at least one requirement.

Question 31Plan and manage the mail transport architecture

In an Exchange Server organization, which component is responsible for routing messages between Mailbox servers in different Active Directory sites?

  1. A Send connector scoped to the destination site
  2. The Front End Transport service on a Client Access server
  3. The Transport service on a Hub Transport role server
  4. The Mailbox Transport Submission service on the source Mailbox server Correct answer.

Explanation

Mailbox servers submit messages through the Mailbox Transport Submission service, and transport routing decides the next hop, including cross-site delivery, without any separate Hub Transport role in modern versions. The Front End Transport service handles external client and inbound SMTP connections, not internal mailbox-to-mailbox routing.

Question 32Plan and manage the mail transport architecture

Which receive connector type is created by default on a Mailbox server to accept mail from other Exchange servers in the organization?

  1. Partner application receive connector
  2. Default internal receive connector Correct answer.
  3. Client Frontend receive connector
  4. Internet receive connector

Explanation

The default internal receive connector listens on port 25 and accepts SMTP from other Exchange transport servers in the organization. Frontend connectors serve client protocols, and internet or partner connectors are created deliberately for external or federated traffic.

Question 33Plan and manage the mail transport architecture

You must ensure that all outbound internet mail from the organization leaves through a smart host that performs content filtering. Which configuration achieves this with the least administrative effort?

  1. Add the smart host to the internal receive connector
  2. Configure an outbound spam policy with a redirect address
  3. Create a Send connector scoped to each accepted domain
  4. Set the smart host on the default Send connector used for the address space * Correct answer.

Explanation

The Send connector handling the address space * is the one used for internet-bound messages, so setting its smart host routes all external mail through the filtering server. Scoping connectors per domain multiplies objects unnecessarily, and receive connectors affect inbound traffic only.

Question 34Plan and manage the mail transport architecture

What is the primary purpose of the shadow redundancy feature in Exchange transport?

  1. To encrypt messages between transport servers
  2. To keep a redundant copy of a message in transit until delivery is confirmed Correct answer.
  3. To compress message attachments during transport
  4. To deduplicate recipients across distribution groups

Explanation

Shadow redundancy retains a shadow copy of a message on the source transport server until the destination confirms successful delivery, so a server failure does not lose mail in transit. It is a reliability mechanism, not an encryption, deduplication, or compression feature.

Question 35Plan and manage the mail transport architecture

A message is addressed to a distribution group whose membership includes a mailbox that no longer exists. What does the categorizer do during recipient resolution?

  1. It silently drops the invalid recipient with no notification
  2. It expands the group and generates a non-delivery report for the unresolved recipient while delivering to valid members Correct answer.
  3. It holds the message in the queue until the mailbox is recreated
  4. It rejects the entire message back to the sender

Explanation

The categorizer expands distribution groups and resolves each recipient; unresolved recipients produce an NDR to the sender while valid recipients still receive the message. The whole message is not rejected because of one bad member, and it is not held indefinitely.

Question 36Plan and manage the mail transport architecture

Which setting on a Send connector determines the maximum size of a message that can be sent through it?

  1. Message size limits on the mailbox plan
  2. MaxReceiveSize on the receive connector
  3. MaxSendSize on the Send connector Correct answer.
  4. Transport rule attachment size limit

Explanation

Each Send connector has a MaxSendSize value that caps the size of messages it will transmit; the effective limit is the smallest relevant limit along the path. MaxReceiveSize belongs to receive connectors, and mailbox plan limits apply to mailbox-level send/receive.

Question 37Plan and manage the mail transport architecture

You need the Exchange organization to accept mail for a second domain, contoso-uk.com, in addition to contoso.com. What must you configure?

  1. A new Send connector scoped to contoso-uk.com
  2. A transport rule that rewrites the recipient domain
  3. An accepted domain of type Authoritative for contoso-uk.com Correct answer.
  4. An email address policy that removes contoso.com

Explanation

An authoritative accepted domain tells Exchange it is responsible for delivering mail for that SMTP namespace. Send connectors control outbound routing, and transport rules do not make Exchange authoritative for a domain.

Question 38Plan and manage the mail transport architecture

A user reports that mail to an external recipient is stuck in the Submission queue. Which condition most directly explains a stalled Submission queue?

  1. The user's Outlook profile is corrupt
  2. The categorizer cannot resolve the recipient or a transport agent is failing Correct answer.
  3. The recipient's mailbox is full
  4. The mailbox database is mounted on a different server

Explanation

The Submission queue holds messages being processed by the categorizer and transport agents; failures in resolution or a malfunctioning agent stall it. Mailbox location, recipient quota, and client profile issues do not block the Submission queue.

Question 39Plan and manage the mail transport architecture

Which transport component applies transport rules and journaling to messages after recipient resolution?

  1. The Transport service on the Mailbox server Correct answer.
  2. The Mailbox Transport Submission service
  3. The Mailbox Transport Delivery service
  4. The Front End Transport service

Explanation

The Transport service on a Mailbox server runs the categorizer and applies transport rules, journaling, and other agents before handing messages to delivery or routing. The Front End Transport service is a stateless proxy, and the submission and delivery services move messages to and from the store.

Question 40Plan and manage the mail transport architecture

You want messages sent to a specific partner domain to use TLS and a dedicated smart host. What is the correct approach?

  1. Create a Send connector with the partner domain as its address space, configure TLS, and set the smart host Correct answer.
  2. Create a receive connector for the partner domain on port 25
  3. Add the partner domain as an authoritative accepted domain
  4. Modify the default * Send connector to require TLS for all domains

Explanation

A Send connector scoped to the partner domain's address space takes precedence for that namespace and can carry its own smart host and TLS settings. Changing the default connector would affect all external mail, and receive connectors and accepted domains do not control outbound partner delivery.

Question 41Plan and manage the mail transport architecture

What does an MX record for a domain tell a sending mail system?

  1. Which server hosts the domain's Autodiscover service
  2. Which server accepts SMTP mail for the domain and its priority Correct answer.
  3. Which IP address the domain uses for outbound relay
  4. Which certificate the receiving server presents

Explanation

MX records publish the mail exchanger hosts for a domain along with a preference value; senders try the lowest preference first. Autodiscover, outbound relay addresses, and certificates are unrelated to MX records.

Question 42Plan and manage the mail transport architecture

A message loop is suspected between two Exchange servers. Which message header field is most useful for tracing the path the message has taken?

  1. Received Correct answer.
  2. Message-ID
  3. X-MS-Exchange-Organization-SCL
  4. X-MS-Exchange-Organization-AuthAs

Explanation

Each transport server prepends a Received header, so the sequence of Received headers shows the hops a message traversed and reveals looping. SCL, Message-ID, and AuthAs convey classification or identity information but not the hop path.

Question 43Plan and manage the mail transport architecture

Which feature lets you route mail for a subset of users through a third-party hygiene service while other users send directly?

  1. A journaling rule targeting the hygiene service
  2. An accepted domain of type Internal relay
  3. Send connectors scoped by address space combined with transport rules that set a custom header or route Correct answer.
  4. A single default Send connector with a smart host for all users

Explanation

You can use transport rules to redirect or tag messages and Send connectors scoped to specific address spaces or smart hosts to separate delivery paths for a subset of users. A single default connector affects everyone, and accepted domains and journaling do not change outbound routing.

Question 44Plan and manage the mail transport architecture

What is the effect of setting an accepted domain to Internal relay instead of Authoritative?

  1. Exchange automatically creates mailboxes for unknown recipients
  2. Exchange rejects all mail for unknown recipients in that domain
  3. Exchange treats the domain as external and blocks inbound mail
  4. Exchange accepts mail for unknown recipients and routes it using a Send connector Correct answer.

Explanation

With Internal relay, Exchange accepts messages for the domain even when the recipient is not a known mailbox, then routes them onward through a Send connector. Authoritative domains, by contrast, generate an NDR for unknown recipients.

Question 45Plan and manage the mail transport architecture

Which queue holds messages that have been routed to a destination but are waiting for an SMTP connection to that destination?

  1. The Poison queue
  2. The Delivery queue Correct answer.
  3. The Submission queue
  4. The Unreachable queue

Explanation

Delivery queues hold messages destined for a specific next hop while Exchange attempts or awaits an SMTP connection. The Submission queue is for categorizer processing, the Poison queue holds messages that repeatedly crash a transport agent, and the Unreachable queue holds messages with no route.

Question 46Plan and manage the mail transport architecture

Which protocol and port does an Exchange Send connector use by default to deliver mail to a remote SMTP host?

  1. IMAP over port 143
  2. ESMTP over port 465
  3. SMTP over port 25 Correct answer.
  4. SMTP over port 587

Explanation

Send connectors deliver mail using SMTP on TCP port 25 by default, optionally wrapped in TLS via opportunistic or required TLS settings. Port 587 is a client submission port, IMAP is a mailbox access protocol, and port 465 is an implicit TLS submission port.

Question 47Plan and manage the mail transport architecture

Which setting on a receive connector allows it to accept mail from an application server that does not authenticate?

  1. Integrated Windows authentication
  2. Exchange Server authentication
  3. Externally secured
  4. Anonymous users permission group Correct answer.

Explanation

Granting the Anonymous users permission group on a receive connector allows unauthenticated SMTP clients, such as legacy application relays, to submit mail. Exchange Server and Integrated Windows authentication require credentials, and Externally secured relies on an external trust mechanism.

Question 48Plan and manage the mail transport architecture

Which transport agent stage runs before the categorizer and can act on messages as they enter the transport pipeline from a receive connector?

  1. The OnDeliveredMessage event
  2. The OnSubmittedMessage event Correct answer.
  3. The OnRoutedMessage event
  4. The OnResolvedMessage event

Explanation

The OnSubmittedMessage event fires when a message is submitted to the transport service, before recipient resolution by the categorizer. OnResolvedMessage and OnRoutedMessage fire later in the pipeline, and OnDeliveredMessage fires at delivery.

Question 49Plan and manage the mail transport architecture

What is the role of the Mailbox Transport Delivery service?

  1. It accepts SMTP connections from internet senders
  2. It routes messages between Active Directory sites
  3. It submits outbound messages from the mailbox store to transport
  4. It delivers messages from the transport pipeline into the recipient mailbox store Correct answer.

Explanation

The Mailbox Transport Delivery service receives messages from the Transport service and writes them into the mailbox database using RPC or MAPI. Outbound submission is handled by the Mailbox Transport Submission service, and internet acceptance is handled by Front End Transport.

Question 50Plan and manage the mail transport architecture

You want to block messages with a specific attachment type from entering the organization. Which feature should you use?

  1. A Send connector with a restricted address space
  2. A transport rule with a condition on attachment extension or type Correct answer.
  3. A mailbox retention policy
  4. An accepted domain of type Authoritative

Explanation

Transport rules can inspect message attachments and reject or redirect messages based on extension or content type. Send connectors, accepted domains, and retention policies do not inspect attachment content for blocking.